Accepting request 1320687 from security:keepassxc

Automatic submission by obs-autosubmit

OBS-URL: https://build.opensuse.org/request/show/1320687
OBS-URL: https://build.opensuse.org/package/show/openSUSE:Factory/keepassxc?expand=0&rev=49

43904d87b7ae7339e393ce9de465556e3da52d3c.patch

@@ -1,27 +0,0 @@
-From 43904d87b7ae7339e393ce9de465556e3da52d3c Mon Sep 17 00:00:00 2001
-From: Michal Suchanek <msuchanek@suse.de>
-Date: Thu, 20 Jun 2024 10:36:32 +0200
-Subject: [PATCH] Increase the time interval for window show workaround
-
-When the keepassxc window is shown something generetes a hide event, and it is hidden again immediately.
-
-The 50ms interval for avoiding hiding the window when shown is not enough, even on modern systems.
-
-Make the interval longer.
----
- src/gui/MainWindow.cpp | 2 +-
- 1 file changed, 1 insertion(+), 1 deletion(-)
-
-diff --git a/src/gui/MainWindow.cpp b/src/gui/MainWindow.cpp
-index 0bd949f10e..66eb4048bb 100644
---- a/src/gui/MainWindow.cpp
-+++ b/src/gui/MainWindow.cpp
-@@ -1818,7 +1818,7 @@ void MainWindow::hide()
- {
- #ifndef Q_OS_WIN
-     qint64 current_time = Clock::currentMilliSecondsSinceEpoch();
--    if (current_time - m_lastShowTime < 50) {
-+    if (current_time - m_lastShowTime < 250) {
-         return;
-     }
- #endif

_service

@@ -1,6 +1,6 @@
 <services>
   <service name="go_modules" mode="manual">
-    <param name="archive">keepassxc-2.7.8-src.tar.xz</param>
+    <param name="archive">keepassxc-2.7.11-src.tar.xz</param>
     <param name="compression">zst</param>
     <param name="subdir">utils/keepassxc-cr-recovery</param>
   </service>

debian.tar.xz

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:afc500a5180ec641b44928cd66eb6297b972b8f34d8f28c6d862f2024d349d48
-size 13088
+oid sha256:e17e3b203fd16c9f50624198d0431e56552906891a5eb1283b6cc3d8725f4d85
+size 13148

keepassxc-2.7.11-src.tar.xz

@@ -0,0 +1,3 @@
+version https://git-lfs.github.com/spec/v1
+oid sha256:ce76b02d396369726aaf695bb46b79c0cc41a0c4f9ec806bde1233cb22e6ef62
+size 10582796

keepassxc-2.7.11-src.tar.xz.sig

@@ -0,0 +1,11 @@
+-----BEGIN PGP SIGNATURE-----
+
+iQEzBAABCAAdFiEEweTLo61406/YlPngt6ZvA7WQdqgFAmkjlz8ACgkQt6ZvA7WQ
+dqjXagf/brYr2MsP+eOT8nVZhhZfEz9sv3RClipVCdkdPIH/5w3aJFtSxFzwex3d
+jfWnZ/m8ebmIBYfDfDsTt+UzxRQX/1+97fgB5s/mrI/oAz2hlVvgB1Og2/eO3WFY
+sHnFp/laxrkg8NoHVXkVhQIU7x45ko3WWwYycY/nlWHdL2m00pYTiZJh136uTpi2
+vqcVuY8QRXDSDVxa3v6oJfsxbb6CBP4AOrp6E2ufeyp6Dyv3qH2rwGFbOfDrMZ/4
+JUUIOoG5o/oNCTYLPHRrtFNjauPEFszzwKnwZN66SnbhWE3lXZp864XubhJoCNru
++PLg3lB/E+Oc6/GretTfX2rAyuhiyg==
+=7mg3
+-----END PGP SIGNATURE-----

keepassxc-2.7.9-src.tar.xz

@@ -1,3 +0,0 @@
-version https://git-lfs.github.com/spec/v1
-oid sha256:3c44e45f22c00ddac63d8bc11054b4b0ada0222ffac08d3ed70f196cb9ed46fd
-size 9789312

keepassxc-2.7.9-src.tar.xz.sig

@@ -1,11 +0,0 @@
------BEGIN PGP SIGNATURE-----
-
-iQEzBAABCAAdFiEEweTLo61406/YlPngt6ZvA7WQdqgFAmZzWEIACgkQt6ZvA7WQ
-dqiqvgf6AsnwWMQNiPEhh/Er9+wsa3HuXMvvE63NI/iHG/NaBx/ayLFSeP+7PWSS
-h167hhMdmRzBSV+dER6ihscEK6AgGYXWmPj0NWl/kxCQSq8jbnCDGE/aa71CVRq2
-LoFNUaLN9pBHJC6YQexYgW0UuOcrIyMlSQOUVzBp6Piv8B3TFDIlSApVuTpe30DE
-Vbj1W/FkKQWjTf+R6rDTrfWuux92PrlU1aBba8BDG7qfBiEGJhnXASBiee9fYHU4
-rxizzLQLUmlKFzWH4k2bN1OM63bD7MDMSlOSVZ5kLLPzkPjydw3hmnHTthILVS25
-PVN/awqd5CoQMdZbIAm4WoE7S7k4DQ==
-=BltA
------END PGP SIGNATURE-----

keepassxc.changes

@@ -1,3 +1,196 @@
+-------------------------------------------------------------------
+Mon Nov 24 01:45:23 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- update to 2.7.11:
+  - Changes
+    - Add image, HTML, Markdown preview, and text editing support
+      to inline attachment viewer [#12085, #12244, #12654]
+    - Add database merge confirmation dialog [#10173]
+    - Add option to auto-generate a password for new entries
+      [#12593]
+    - Add support for group sync in KeeShare [#11593]
+    - Add {UUID} placeholder for use in references [#12511]
+    - Add “Wait for Enter” search option [#12263]
+    - Add keyboard shortcut to “Jump to Group” from search results
+      [#12225]
+    - Add predefined search for TOTP entries [#12199]
+    - Add confirmation when closing database via ESC key [#11963]
+    - Add support for escaping placeholder expressions [#11904]
+    - Reduce tab indentation width in notes fields [#11919]
+    - Cap default Argon2 parallelism when creating a new database
+      [#11853]
+    - Database lock after inactivity now enabled by default and set
+      to 900 seconds [#12689, #12609]
+    - Copying TOTP now opens setup dialog if none is configured for
+      entry [#12584]
+    - Make double click action configurable [#12322]
+    - Remove unused “Last Accessed” from GUI [#12602]
+    - Auto-Type: Add more granular confirmation settings [#12370]
+    - Auto-Type: Add URL typing preset and add copy options to menu
+      [#12341]
+    - Browser: Do not allow sites automatically if entry added from
+      browser extension [#12413]
+    - Browser: Add options to restrict exposed groups [#9852,
+      #12119]
+    - Bitwarden Import: Add support for timestamps and password
+      history [#12588]
+    - macOS: Add Liquid Glass icon [#12642]
+    - macOS: Remove theme-based menubar icon toggle [#12685]
+    - macOS: Add Window and Help menus [#12357]
+    - Windows: Add option to add KeePassXC to PATH during
+      installation [#12171]
+  - Fixes
+    - Fix window geometry not being restored properly when
+      KeePassXC starts in tray [#12683]
+    - Fix potential database truncation when using direct write
+      save method with YubiKeys [#11841]
+    - Fix issue with database backup saving [#11874]
+    - Fix UI lockups during startup with multiple tabs [#12053]
+    - Fix keyboard shortcuts when menubar is hidden [#12431]
+    - Fix clipboard being cleared on exit even if no password was
+      copied [#12603]
+    - Fix single-instance detection when username contains invalid
+      filename characters [#12559]
+    - Fix “Search Wait for Enter” setting not being save [#12614]
+    - Fix hotkey accelerators not being escaped properly on
+      database tabs [#12630]
+    - Fix confusing error if user cancels out of key file edit
+      dialog [#12639]
+    - Fix issues with saved searches and “Press Enter to Search”
+      option [#12314]
+    - Fix URL wildcard matching [#12257]
+    - Fix TOTP visibility on unlock and settings change [#12220]
+    - Fix KeeShare entries with reference attributes not updating
+      [#11809]
+    - Fix sort order not being maintained when toggling filters in
+      database reports [#11849]
+    - Fix several UI font and layout issues [#11967, #12102]
+    - Prevent mouse wheel scroll on edit username field [#12398]
+    - Improve base translation consistency [#12432]
+    - Improve inactivity timer [#12246]
+    - Documentation improvements [#12373, #12506]
+    - Browser: Fix ordering of clientDataJSON in Passkey response
+      object [#12120]
+    - Browser: Fix URL matching for additional URLs [#12196]
+    - Browser: Fix group settings inheritance [#12368]
+    - Browser: Allow read-only native messaging config files
+      [#12236]
+    - Browser: Optimise entry iteration in browser access control
+      dialog [#11817]
+    - Browser: Fix “Do not ask permission for HTTP Basic Auth”
+      option [#11871]
+    - Browser: Fix native messaging path for Tor Browser launcher
+      on Linux [#12005]
+    - Auto-Type: Fix empty window behaviour [#12622]
+    - Auto-Type: Take delays into account when typing TOTP [#12691]
+    - SSH Agent: Fix out-of-memory crash with malformed SSH keys
+      [#12606]
+    - CSV Import: Fix modified and creation time import [#12379]
+    - CSV Import: Fix duplication of root groups on import [#12240]
+    - Proton Pass Import: Fix email addresses not being imported
+      when no username set [#11888]
+    - macOS: Fix secure input getting stuck [#11928]
+    - Windows: Prevent launch as SYSTEM user from MSI installer
+      [#12705]
+    - Windows: Remove broken check for MSVC Redistributable from
+      MSI installer [#11950]
+    - Linux: Fix startup delay due to StartupNotify setting in
+      desktop file [#12306]
+    - Linux: Fix memory initialisation when --pw-stdin is used with
+      a pipe [#12050]
+
+-------------------------------------------------------------------
+Sat Nov 22 21:19:51 CET 2025 - Stanislav Brabec <sbrabec@suse.com>
+
+- Remove unused BuildRequires: update-desktop-files.
+
+-------------------------------------------------------------------
+Sun Mar  2 23:26:13 UTC 2025 - Marcus Rueckert <mrueckert@suse.de>
+
+- update to 2.7.10:
+  - Changes
+    - Allow adjusting application font size [#11567]
+    - Add Proton Pass importer [#11197]
+    - Support KeePass2 TOTP settings [#11229]
+    - Add New/Preview Entry Attachments dialog and functionality
+      [#11637, #11699, #11650]
+    - Add database name, color, and icon options for unlock view
+      [#10819, #11725]
+    - Show entry background color as column [#6798]
+    - Use icons for password strength [#9844]
+    - Add "Group Full Path" column in entry view [#10278]
+    - Passphrase "MIXED case" Type [#11255]
+    - Allow deleting extension plugin data from Browser Statistics
+      [#11218]
+    - Add --minimized option to keepassxc [#11693]
+    - Implement T-CONV and T-REPLACE-RX entry placeholders [#11453]
+    - Option to disable opening browser when URL field
+      double-clicked [#11332]
+    - Overhaul action states and add icons to toolbar [#11047]
+    - Show character count in password generator dialog [#10940]
+    - Add ability to expire entries from context menu [#8731]
+    - Add copy field shortcuts to Auto-Type select dialog [#11518]
+    - Passkeys: Add support for selecting group on creation
+      [#11260]
+    - Browser: Refactor Access Control Dialog [#9607]
+    - Browser: Add support for URL wildcards and exact URL [#9835,
+      #11752]
+    - Browser: Allow groups to restrict by browser integration key
+      [#9852]
+    - CLI: Add -d dry-run shortcut to merge command [#11192]
+    - CLI: HTML export [#11590]
+    - macOS: Add option to disable database lock when switching
+      user [#9707]
+    - SSH Agent: Implement feature to clear all identities [#10649]
+  - Fixes
+    - Major enhancements to documentation [#11745, #10875]
+    - Various UI and style fixes [#11535, #11672, #11511, #11445,
+      #11426, #11273, #11455, #11321, #11594, #11539, #11351,
+      #11354, #10748, #11602, #11303, #11291, #10091, #9417]
+    - Various improvements to tags [#11676, #11652, #11625]
+    - Reset splitter sizes on database unlock [#11014]
+    - Remember sort order in Auto-type popup dialog [#9508]
+    - Fix database password clearing when modifying key file /
+      hardware key [#11001]
+    - Fix issues with reloading and handling of externally modified
+      db file [#10612]
+    - Support passkeys with Bitwarden import [#11401]
+    - Fix various quirks with CSV import [#11787]
+    - Show Auto-Type select dialog even if window title is empty
+      [#11603]
+    - Refactor hardware key code to avoid deadlock [#11703, #10872]
+    - Show a clear error if hardware key is found slots are not
+      configured [#11609]
+    - Fix signal/slot disconnect when opening import wizard
+      [#11039]
+    - Fix setting window title as modified [#11542]
+    - Fix assert hit when viewing entry history [#11413]
+    - Fix multiple crashes on Linux [#11513]
+    - Fix backup file path time substitution [#10834]
+    - Prevent long-running threads from deadlocking the program
+      with only 1 CPU [#11155]
+    - Hide the menubar when menus lose focus (if toggled off)
+      [#11355, #11605]
+    - CLI: Restore the original codepage on windows [#11470]
+    - Passkeys: Various fixes [#10934, #10951]
+    - Browser: Fix cancel with database unlock dialog [#11435]
+    - Browser: Resolve references in Access Confirm dialog [#11055]
+    - SSH Agent: Add timeout to streams to prevent deadlock
+      [#11290]
+    - macOS: Replace legacy code for screen recording permissions
+      [#11428]
+    - macOS: Implement Secure Input Mode [#11623]
+    - macOS: Fix showing ambigious name in settings [#11373]
+    - macOS: Fix copy-to-clipboard shortcut in entry preview widget
+      [#10966]
+    - Linux: Prevent multiple lock requests [#11306]
+    - Snap: Prevent need for snap helper script to configure
+      browser extension [#10924]
+    - Windows: Detect outdated VC Redist with MSI installer
+      [#11469]
+    - Windows: Additional exclusion fields for clipboard [#11521]
+- drop 43904d87b7ae7339e393ce9de465556e3da52d3c.patch
+
 -------------------------------------------------------------------
 Tue Jan 21 08:39:57 UTC 2025 - Max Lin <mlin@suse.com>
 

keepassxc.dsc

@@ -2,7 +2,7 @@ Format: 3.0 (quilt)
 Source: keepassxc
 Binary: keepassxc
 Architecture: any
-Version: 2.7.8-1.1
+Version: 2.7.11-1.1
 Maintainer: Julian Andres Klode <jak@debian.org>
 Homepage: https://www.keepassxc.org/
 Standards-Version: 4.4.0

keepassxc.spec

@@ -17,6 +17,7 @@
 #
 
 
+
 %if 0%{?suse_version} || 0%{?fedora_version} >= 33
 %bcond_without cmake_macros
 %else
@@ -30,7 +31,7 @@
 %endif
 
 Name:           keepassxc
-Version:        2.7.9
+Version:        2.7.11
 Release:        0
 Summary:        Qt5-based Password Manager
 License:        GPL-2.0-only OR GPL-3.0-only
@@ -44,7 +45,6 @@ Source3:        vendor.tar.zst
 #Source97:       _constraints
 Source98:       debian.tar.xz
 Source99:       keepassxc.dsc
-Patch1:         43904d87b7ae7339e393ce9de465556e3da52d3c.patch
 BuildRequires:  cmake >= 3.1.0
 BuildRequires:  fdupes
 BuildRequires:  hicolor-icon-theme
@@ -92,9 +92,6 @@ BuildRequires:  golang-packaging
 BuildRequires:  zstd
 %endif
 
-%if 0%{?suse_version}
-BuildRequires:  update-desktop-files
-%endif
 Requires:       hicolor-icon-theme
 Requires(post): hicolor-icon-theme
 Requires(post): shared-mime-info

vendor.tar.zst

@@ -1,3 +1,3 @@
 version https://git-lfs.github.com/spec/v1
-oid sha256:126cec5a02360aa00bbf07f88670d47ecbf75088596d889b1cdbf073f5066b32
-size 314642
+oid sha256:2c5aa9273d76f15b518055a14c4b0612d4df90cf885bff9ba75c885ffbbd88de
+size 532652